Yocto-5.0.10 (Scarthgap) 发布说明

Yocto-5.0.10 中的安全修复

• binutils: Fix CVE-2025-1153, CVE-2025-1179, CVE-2025-1180 and CVE-2025-1182

• connman: Fix CVE-2025-32366 and CVE-2025-32743

• curl: Fix CVE-2024-11053 and CVE-2025-0167

• elfutils: Fix CVE-2025-1371

• ffmpeg: Fix CVE-2024-7055, CVE-2024-32230, CVE-2024-35366, CVE-2024-36613, CVE-2024-36616, CVE-2024-36617 and CVE-2024-36619

• git: Fix CVE-2024-50349 and CVE-2024-52006

• glib-2.0: fix CVE-2025-3360 and CVE-2025-4373

• iputils: Fix CVE-2025-47268

• libpam: Fix CVE-2024-10041

• libsoup-2.4: Fix CVE-2024-52530, CVE-2024-52531, CVE-2024-52532, CVE-2025-32906, CVE-2025-32909, CVE-2025-32910, CVE-2025-32911, CVE-2025-32912, CVE-2025-32913, CVE-2025-32914 and CVE-2025-46420

• libsoup: Fix CVE-2025-4476, CVE-2025-32906, CVE-2025-32909, CVE-2025-32910, CVE-2025-32911, CVE-2025-32912, CVE-2025-32913, CVE-2025-32914 and CVE-2025-46420

• libxml2: Fix CVE-2025-32414 and CVE-2025-32415

• openssh: Fix CVE-2025-32728

• perl: Fix CVE-2024-56406

• ppp: Fix CVE-2024-58250

• python3-jinja2: Fix CVE-2024-56201, CVE-2024-56326 and CVE-2025-27516

• ruby: Fix CVE-2025-27221

• sqlite3: Fix CVE-2025-3277, CVE-2025-29087 and CVE-2025-29088

Yocto-5.0.10 中的修复

• binutils: stable 2.42 branch updates

• bluez5: add missing tools to noinst-tools package

• bluez5: backport a patch to fix btmgmt -i

• bluez5: make media control a PACKAGECONFIG option

• build-appliance-image: Update to scarthgap head revision

• buildtools-tarball: Make buildtools respects host CA certificates

• buildtools-tarball: add envvars into BB_ENV_PASSTHROUGH_ADDITIONS

• buildtools-tarball: move setting of envvars to respective envfile

• contributor-guide/submit-changes: encourage patch version changelogs

• cve-check.bbclass: Fix symlink handling also for text files

• cve-update-nvd2-native: Revert "cve-update-nvd2-native: Tweak to work better with NFS DL_DIR"

• dev-manual/sbom.rst: fix wrong build outputs

• docs: Fix dead links that use the DISTRO macro

• docs: conf.py: tweak SearchEnglish to be hyphen-friendly

• docs:conf.py: define a manpage url

• ffmpeg: upgrade to 6.1.2

• git: upgrade to 2.44.3

• glibc-y2038-tests: remove glibc-y2038-tests_2.39.bb recipe

• glibc: Add single-threaded fast path to rand()

• glibc: stable 2.39 branch updates

• initscripts: add function log_success_msg/log_failure_msg/log_warning_msg

• libatomic-ops: Update GITHUB_BASE_URI

• manuals: remove repeated word

• migration-guides: add release notes for 4.0.26, 5.0.8, 5.0.9

• module.bbclass: add KBUILD_EXTRA_SYMBOLS to install

• perl: upgrade to 5.38.4

• perlcross: upgrade to 1.6.2

• poky.conf: bump version for 5.0.10

• poky.yaml: introduce DISTRO_LATEST_TAG

• python3-jinja2: upgrade to 3.1.6

• ref-manual/release-process: update releases.svg

• ref-manual/variables.rst: HOST_CC_ARCH: fix wrong SDK reference

• ref-manual/variables.rst: WATCHDOG_TIMEOUT: fix recipe name

• ref-manual/variables.rst: add manpage links for toolchain variables

• ref-manual/variables.rst: add missing documentation for BUILD_* variables

• ref-manual/variables.rst: document HOST_*_ARCH variables

• ref-manual/variables.rst: document INHIBIT_DEFAULT_RUST_DEPS

• ref-manual/variables.rst: document INHIBIT_UPDATERCD_BBCLASS

• ref-manual/variables.rst: document SSTATE_SKIP_CREATION

• ref-manual/variables.rst: document WIC_CREATE_EXTRA_ARGS

• ref-manual/variables.rst: document autotools class related variables

• ref-manual/variables.rst: document missing SDK_*_ARCH variables

• ref-manual/variables.rst: document the IMAGE_ROOTFS_MAXSIZE variable

• ref-manual/variables.rst: document the INITRAMFS_MAXSIZE variable

• ref-manual/variables.rst: improve the PKGV documentation

• ref-manual/variables.rst: update ROOT_HOME documentation

• ref-manual: kernel-fitimage.bbclass does not use SPL_SIGN_KEYNAME

• scripts/install-buildtools: Update to 5.0.9

• sphinx-lint: missing space after literal

• sphinx-lint: trailing whitespace

• sphinx-lint: unbalanced inline literal markup

• systemd: Password agents shouldn't be optional

• systemd: upgrade to 255.18

• test-manual/intro: remove Buildbot version used

• tzdata/tzcode-native: upgrade 2025a -> 2025b

• u-boot: ensure keys are generated before assembling U-Boot FIT image

• util-linux: Add fix to isolate test fstab entries using CUSTOM_FSTAB

• wic: bootimg-efi: Support + symbol in filenames

Yocto-5.0.10 中的已知问题

• 如果构建主机上存在 apachectl，目标 libsoup-2.4 的构建可能失败。 该问题仅影响实际上不会使用的测试二进制文件。可以禁用测试， 或更新到 scarthgap 分支中包含修复的较新提交来解决此问题。

Yocto-5.0.10 的贡献者

感谢以下人员为本次发布作出的贡献：

• Adrian Freihofer

• Aleksandar Nikolic

• Alexander Kanavin

• Alon Bar-Lev

• Alper Ak

• Andrew Kreimer

• Antonin Godard

• Archana Polampalli

• Ashish Sharma

• Changqing Li

• Christos Gavros

• Deepesh Varatharajan

• Divya Chellam

• Divyanshu Rathore

• Enrico Jörns

• Etienne Cordonnier

• Guðni Már Gilbert

• Haixiao Yan

• Harish Sadineni

• Igor Opaniuk

• Jeroen Hofstee

• Lee Chee Yang

• Nguyen Dat Tho

• Niko Mauno

• Peter Marko

• Praveen Kumar

• Priyal Doshi

• Rogerio Guerra Borin

• Shubham Kulkarni

• Soumya Sambu

• Steve Sakoman

• Sunil Dora

• Trevor Woerner

• Vijay Anusuri

• Virendra Thakur

• Vyacheslav Yurkov

• Yi Zhao

• Yogita Urade

• rajmohan r

Yocto-5.0.10 的仓库与下载

poky

• Repository Location: https://git.yoctoproject.org/poky

• Branch: scarthgap

• Tag: yocto-5.0.10

• Git Revision: ac257900c33754957b2696529682029d997a8f28

• Release Artefact: poky-ac257900c33754957b2696529682029d997a8f28

• sha: ddca7e54b331e78214bea65b346320d4fbcddf4b51103bfbbd9fc3960f32cdc7

• Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/poky-ac257900c33754957b2696529682029d997a8f28.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/poky-ac257900c33754957b2696529682029d997a8f28.tar.bz2

openembedded-core

• Repository Location: https://git.openembedded.org/openembedded-core

• Branch: scarthgap

• Tag: yocto-5.0.10

• Git Revision: d5342ffc570d47a723b18297d75bd2f63c2088db

• Release Artefact: oecore-d5342ffc570d47a723b18297d75bd2f63c2088db

• sha: daa62094f2327f4b3fbcc485e8964d1b86a4722f58fb37e0d8e8e9885094a262

• Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/oecore-d5342ffc570d47a723b18297d75bd2f63c2088db.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/oecore-d5342ffc570d47a723b18297d75bd2f63c2088db.tar.bz2

meta-mingw

• Repository Location: https://git.yoctoproject.org/meta-mingw

• Branch: scarthgap

• Tag: yocto-5.0.10

• Git Revision: bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f

• Release Artefact: meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f

• sha: ab073def6487f237ac125d239b3739bf02415270959546b6b287778664f0ae65

• Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/meta-mingw-bd9fef71ec005be3c3a6d7f8b99d8116daf70c4f.tar.bz2

bitbake

• Repository Location: https://git.openembedded.org/bitbake

• Branch: 2.8

• Tag: yocto-5.0.10

• Git Revision: 696c2c1ef095f8b11c7d2eff36fae50f58c62e5e

• Release Artefact: bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e

• sha: fc83f879cd6dd14b9b7eba0161fec23ecc191fed0fb00556ba729dceef6c145f

• Download Locations: https://downloads.yoctoproject.org/releases/yocto/yocto-5.0.10/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2 https://mirrors.kernel.org/yocto/yocto/yocto-5.0.10/bitbake-696c2c1ef095f8b11c7d2eff36fae50f58c62e5e.tar.bz2

yocto-docs

• Repository Location: https://git.yoctoproject.org/yocto-docs

• Branch: scarthgap

• Tag: yocto-5.0.10

• Git Revision: 3996388e337377bedc113d072a51fe9d68dd40c6